CVE-2025-43988

CVSS 7.5 HIGHEPSS 0.4%CWE-200

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 ago 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

KuWFi 5G01-X55 FL2020_V0.0.12 devices expose an unauthenticated API endpoint (ajax_get.cgi), allowing remote attackers to retrieve sensitive configuration data, including admin credentials.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Productos afectados

n/a · n/a

Referencias

https://drive.proton.me/urls/9EB08033PW#2b7dTc2x705W https://github.com/actuator/cve/blob/main/Kuwfi/CVE-2025-43988.txt https://github.com/actuator/cve/tree/main/Kuwfi https://kuwfi.com/products/nsa-sa-25gbps-kuwfi-6000mah-wifi-router-5g-dual-band-128users-portable-5g-wifi-router-with-sim-card-slot